Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
File:                     fU328vfdsHN-2q2EhSP4cXbnzoE.mft (raw, json)
Hash identifier:          APkdBRiRO4wXZeCnX+ZmnH5VU8veyXG8CbXlixg3Rbo=
Subject key identifier:   9F:76:CD:67:7F:79:FF:5D:2D:82:4E:E5:B4:08:A1:35:74:E2:51:B0
Authority key identifier: 7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81
Certificate issuer:       /CN=F3640C3CAF/serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
Certificate serial:       1A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
Manifest number:          19
Signing time:             Wed 05 Feb 2025 03:23:30 +0000
Manifest this update:     Wed 05 Feb 2025 03:23:29 +0000
Manifest next update:     Fri 07 Feb 2025 03:23:29 +0000
Files and hashes:         1: fU328vfdsHN-2q2EhSP4cXbnzoE.crl (hash: i/odD7jOrrEAq3YXlv9hR/WWDv5y/nUSD8YWdI9MMFg=)
                          2: 9E9AD310D2BF11EFBBD01F9D762E951A.roa (hash: sKmiIxBHJPr3OGeB7htmDk2gGj7RAu5zKpegjCoJFAY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640C3CAF
        Validity
            Not Before: Feb  5 03:23:29 2025 GMT
            Not After : Feb  7 03:23:29 2025 GMT
        Subject: CN=67a2d9b1-4336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:2c:0b:87:28:0c:4a:a8:2c:35:21:6e:c2:
                    c2:ed:0b:92:a3:8d:3a:8c:18:09:14:90:d1:a8:ad:
                    29:8a:61:71:de:59:5e:52:ac:a2:3e:1d:d3:d2:d9:
                    82:1a:54:f8:d3:97:20:e4:b2:99:e1:e1:81:72:5a:
                    da:b7:1b:cd:3a:05:2c:97:68:4a:54:14:a6:65:48:
                    c2:9d:5a:88:85:e2:be:c5:27:70:f8:23:f2:fd:ca:
                    03:80:07:0a:f4:63:79:e5:62:6a:a4:5d:fd:2e:1a:
                    cc:7c:b4:8d:fa:e5:dc:b6:46:bc:10:71:92:fe:83:
                    cf:5b:71:21:30:ac:fd:18:e8:06:f8:31:cf:93:26:
                    9d:dd:af:7b:e1:7a:3c:49:42:2b:de:cb:81:0a:db:
                    12:2b:a8:26:0e:1d:77:71:32:ad:48:cd:d4:02:2d:
                    82:39:54:1f:6f:0f:45:f2:2f:42:92:c3:f5:d4:ea:
                    30:9d:3d:6c:ac:2f:55:23:bd:95:b4:f3:fc:5f:15:
                    a2:55:82:6c:a0:ec:bf:6c:f3:f2:80:91:df:51:57:
                    85:25:64:9c:b6:7f:83:25:4d:77:18:d9:ee:bc:b7:
                    b2:be:15:d9:8d:34:17:38:85:9b:12:0f:06:1b:50:
                    b0:99:dc:12:3c:23:15:8e:b7:e6:fb:af:f8:94:f8:
                    d8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:76:CD:67:7F:79:FF:5D:2D:82:4E:E5:B4:08:A1:35:74:E2:51:B0
            X509v3 Authority Key Identifier:
                keyid:7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ac:db:83:5f:9f:a8:51:d5:0b:1d:32:6f:82:1b:91:84:df:
         a4:ab:c3:e6:57:79:d4:20:57:f1:44:6e:d0:c1:1e:27:aa:aa:
         c7:6c:17:dd:b4:ee:91:14:1f:1a:3f:37:23:09:2a:6e:d7:5e:
         78:13:d2:77:8b:7c:55:a2:d7:2e:0a:66:c9:32:cc:dd:f7:8e:
         a8:4c:3b:3f:cd:e2:23:6a:ad:1e:bc:3b:67:42:dd:84:e1:01:
         4e:54:3b:3d:da:34:f1:9b:59:92:af:f5:c9:2f:fb:83:ed:31:
         03:2e:dc:b4:9f:51:6c:61:1e:c3:9f:c0:b1:1b:fc:60:33:de:
         70:96:3a:04:bd:ff:1e:df:fb:64:e4:d3:70:c2:f9:09:b8:96:
         f1:73:a7:87:5a:eb:77:4b:29:a8:de:52:5d:fc:02:b0:81:94:
         11:f9:b2:bb:08:4c:7f:7d:2e:77:e0:46:f6:00:a0:5e:1c:4d:
         90:a1:6d:49:c2:eb:ca:99:5b:4d:f3:be:d5:de:8c:15:77:25:
         eb:be:28:3c:54:6a:c0:ad:de:9b:46:e1:90:5a:f3:23:96:74:
         19:ed:96:99:43:56:21:d2:77:d1:17:e0:39:4d:6f:db:96:57:
         b5:47:ab:23:70:8a:1a:31:47:84:11:2f:f9:10:61:b8:a2:5b:
         67:ea:fc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:55:44 2025 by rpki-client